Join our Newsletter — 33% off our NHI Course

Social engineering across Slack, Teams and meetings: what changes?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 17435
Topic starter  

TL;DR: Attacks are moving beyond email into Slack, Teams, social media and live meetings, while AI-driven deception and machine-speed campaigns are eroding the value of manual investigation and legacy security stacks, according to Doppel's 2026 social engineering predictions. The control problem is shifting from after-the-fact review to continuous, cross-channel detection and response.

Editorial analysis by NHI Mgmt Group, based on content published by Doppel: “2026 Social Engineering Defense Predictions”.

Key questions

Q: What breaks when phishing moves beyond email into collaboration apps?

A: Email-only defence breaks because the attacker no longer needs to win inside the mailbox.

Q: Why do AI-generated impersonation attacks make manual investigation less effective?

A: AI reduces the cost of creating believable, varied lures at scale, so analysts face more incidents that look plausible and arrive faster than they can review them.

Q: How should security teams handle social engineering when launch happens across multiple channels at once?

A: Teams should treat launch as a campaign correlation problem, not a single-message problem.

Practitioner guidance

  • Expand monitoring beyond email Instrument Slack, Teams, social channels and meeting workflows so suspicious impersonation is visible where it starts, not only where it lands.
  • Build verification steps into high-risk requests Require out-of-band identity checks for payment changes, credential resets, executive instructions and other high-impact requests that attackers commonly impersonate.
  • Automate correlation across brand and identity signals Connect collaboration alerts, impersonation reports and fraud indicators so analysts see a campaign rather than isolated messages.

Bottom line: Social engineering is evolving into a multi-channel trust attack that crosses collaboration tools, social platforms and live meetings, so email-centric controls no longer cover the full threat.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.